Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa
File:                     3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          YjKUvggb4BjrhZLOtgfW9euIw7q4Ah6sFQx/V2aRdRA=
Subject key identifier:   C6:CE:97:9D:47:F3:3B:B5:A2:C1:1E:7B:19:8B:E0:AB:BA:2D:30:9D
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       7766938D25EDD0B7E84EBDF916CC9D1B5B945BA6
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa
Signing time:             Wed 05 Jun 2024 06:37:31 +0000
ROA not before:           Wed 05 Jun 2024 06:32:31 +0000
ROA not after:            Wed 04 Jun 2025 06:37:31 +0000
asID:                     140481
IP address blocks:        110.76.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:66:93:8d:25:ed:d0:b7:e8:4e:bd:f9:16:cc:9d:1b:5b:94:5b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Jun  5 06:32:31 2024 GMT
            Not After : Jun  4 06:37:31 2025 GMT
        Subject: CN=C6CE979D47F33BB5A2C11E7B198BE0ABBA2D309D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:fe:4b:0c:94:ed:c8:a5:4e:2c:8a:92:ae:
                    24:52:17:08:f2:f3:1a:c8:95:9e:87:c0:31:1b:9f:
                    8f:66:e0:cb:8f:76:57:76:f2:21:88:0e:22:95:12:
                    5e:06:49:7d:8e:91:16:4e:26:f4:01:e6:b9:cb:cc:
                    f4:5b:cc:01:35:7e:4c:f3:f5:23:7d:e3:08:b2:96:
                    2d:ef:14:2a:20:76:71:d4:a6:c3:5f:09:02:1d:53:
                    a3:cd:18:5f:ba:8c:da:58:c7:a0:db:cb:19:ca:dc:
                    5f:0a:68:06:76:bb:99:13:d3:6b:28:db:9f:7f:e5:
                    29:7b:89:ca:8e:a4:7c:34:10:bb:0a:f6:ce:9e:ff:
                    f3:a7:a6:6e:d6:96:7e:3d:6f:dc:ac:5d:ca:e1:51:
                    31:1a:91:f2:a6:a2:06:86:aa:25:e6:a1:93:c0:69:
                    5f:74:c9:19:dc:cd:fe:df:f6:47:de:1c:c5:bd:3b:
                    5f:ac:22:d4:1b:20:24:fd:4e:c9:bd:e0:c3:d8:e5:
                    38:bd:d0:74:20:12:47:54:a1:e0:92:de:f2:62:18:
                    5b:23:17:20:e5:c5:a5:5b:3e:14:83:6d:bf:e2:9d:
                    d5:b0:c8:d8:06:0b:6a:92:9d:dd:d2:89:45:64:74:
                    8d:a5:94:ef:51:15:4e:98:21:36:b2:e9:b8:c1:6d:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CE:97:9D:47:F3:3B:B5:A2:C1:1E:7B:19:8B:E0:AB:BA:2D:30:9D
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:a9:40:58:83:98:69:a2:c2:69:c0:10:d5:34:46:6c:6e:
         23:b4:ca:26:eb:b4:17:17:1d:36:65:33:ca:0a:09:30:c7:d0:
         72:18:8a:84:84:22:1e:08:cb:51:83:99:d4:53:90:92:d2:df:
         29:0f:bb:ca:ff:7d:2f:d8:e0:f6:4b:75:7e:0e:5b:fe:1f:20:
         0f:8e:44:ad:b1:63:dc:1c:0c:eb:7d:06:41:da:13:a2:e0:fa:
         98:66:22:7c:c0:4d:d0:0d:63:18:5d:9c:27:cf:e1:13:04:80:
         ad:56:88:bc:8d:4d:20:71:a5:4b:ca:fd:d4:f2:43:80:e8:4e:
         35:a2:9c:bb:f4:50:17:c4:34:b4:86:10:9e:3e:aa:0c:68:44:
         5e:1c:fa:39:b8:e9:c8:e0:5d:8c:6b:bb:2f:4c:15:41:c9:bf:
         dc:7b:4a:8e:b2:2e:f5:a7:f3:87:b3:85:cc:83:c1:b1:f2:ab:
         34:75:c9:a2:80:54:9c:d9:05:3b:4c:d4:34:a7:ea:92:39:cf:
         04:e9:72:29:df:1c:89:d6:48:95:ca:6e:db:fb:95:83:d5:1d:
         a7:b5:ea:7d:f6:51:12:37:97:db:a0:31:00:c2:f6:97:23:28:
         08:81:4e:9e:81:6a:ea:40:80:58:33:5c:1a:d2:6d:3b:cb:e2:
         6a:45:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:53:45 2024 by rpki-client on console-fra.rpki-client.org